{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,3]],"date-time":"2026-09-03T01:40:53Z","timestamp":1788399653038,"version":"build-2803163510"},"reference-count":22,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2014,3,2]],"date-time":"2014-03-02T00:00:00Z","timestamp":1393718400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Multimed Tools Appl"],"published-print":{"date-parts":[[2015,1]]},"DOI":"10.1007\/s11042-014-1870-0","type":"journal-article","created":{"date-parts":[[2014,3,3]],"date-time":"2014-03-03T23:44:26Z","timestamp":1393890266000},"page":"303-318","source":"Crossref","is-referenced-by-count":55,"title":["Novel Approach for Detecting Network Anomalies for Substation Automation based on IEC 61850"],"prefix":"10.1007","volume":"74","author":[{"given":"Hyunguk","family":"Yoo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Taeshik","family":"Shon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2014,3,2]]},"reference":[{"key":"1870_CR1","volume-title":"Intrusion detection in SCADA networks. Mechanisms for autonomous management of networks and services","author":"RRR Barbosa","year":"2010","unstructured":"Barbosa RRR, Pras A (2010) Intrusion detection in SCADA networks. Mechanisms for autonomous management of networks and services. Springer, Berlin"},{"key":"1870_CR2","doi-asserted-by":"crossref","unstructured":"Barbosa RRR, Sadre R, Pras A (2012) Towards periodicity based anomaly detection in SCADA networks. Emerging Technologies & Factory Automation (ETFA), 2012 I.E. 17th Conference on. IEEE","DOI":"10.1109\/ETFA.2012.6489745"},{"key":"1870_CR3","doi-asserted-by":"crossref","unstructured":"Breunig MM et al (2000) LOF: identifying density-based local outliers. ACM Sigmod Rec 29(2), ACM","DOI":"10.1145\/335191.335388"},{"key":"1870_CR4","unstructured":"Cheung S, Dutertre B, Fong M, Lindqvist U, Skinner K, Valdes A (2007) Using model-based intrusion detection for SCADA networks. SCADA Security Scientific Symposium"},{"key":"1870_CR5","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1111\/j.2517-6161.1977.tb01600.x","volume":"39","author":"AP Dempster","year":"1977","unstructured":"Dempster AP, Laird NM, Rubin DB (1977) Maximum likelihood from incomplete data via the EM algorithm. J R Stat Soc Ser B Methodol 39:1\u201338","journal-title":"J R Stat Soc Ser B Methodol"},{"key":"1870_CR6","doi-asserted-by":"crossref","unstructured":"Dussel P, Gehl C, Laskov P, Buber J-U, Stormann C, Kastner J (2010) Cyber-critical infrastructure protection using real-time payload-based anomaly detection. Critical Information Infrastructures Security","DOI":"10.1007\/978-3-642-14379-3_8"},{"key":"1870_CR7","doi-asserted-by":"crossref","unstructured":"Garitano I, Uribeetxeberria R, Zurutuza U (2010) A review of SCADA anomaly detection systems. Intelligent and Soft Computing","DOI":"10.1007\/978-3-642-19644-7_38"},{"key":"1870_CR8","unstructured":"Kirrmann H (2012) Introduction to the IEC 61850 electrical utility communication standard. ABB"},{"key":"1870_CR9","unstructured":"Markey EJ, Waxman HA (2013) Electric grid vulnerability: industry responses reveal security gaps."},{"key":"1870_CR10","unstructured":"Mcafee. Application control. http:\/\/www.mcafee.com\/us\/products\/application-control.aspx"},{"key":"1870_CR11","unstructured":"Pleijsier E (2013) Towards anomaly detection in SCADA networks using connection patterns"},{"key":"1870_CR12","doi-asserted-by":"crossref","unstructured":"Premaratne U, Samarabandu J, Sidhu T, Beresh B, Tan J-C (2008) Evidence theory based decision fusion for masquerade detection in IEC 61850 automated substations. Information and Automation for Sustainability, 2008. ICIAFS 2008. 4th International Conference on. IEEE","DOI":"10.1109\/ICIAFS.2008.4783971"},{"key":"1870_CR13","doi-asserted-by":"crossref","first-page":"1443","DOI":"10.1162\/089976601750264965","volume":"13.7","author":"B Sch\u00f6lkopf","year":"2001","unstructured":"Sch\u00f6lkopf B et al (2001) Estimating the support of a high-dimensional distribution. Neural Comput 13.7:1443\u20131471","journal-title":"Neural Comput"},{"key":"1870_CR14","doi-asserted-by":"crossref","unstructured":"Shon T, Moon J (2007) A hybrid machine learning approach to network anomaly detection. Information Sciences","DOI":"10.1016\/j.ins.2007.03.025"},{"key":"1870_CR15","doi-asserted-by":"crossref","unstructured":"Ten C-W, Hong J, Liu C-C (2011) Anomaly detection for cybersecurity of the substations. IEEE Transactions on Smart Grid","DOI":"10.1109\/TSG.2011.2159406"},{"key":"1870_CR16","unstructured":"Torfino. Torfino Modbus TCP enforcer. http:\/\/www.tofinosecurity.com\/products\/Tofino-Modbus-TCP-Enforcer-LSM"},{"key":"1870_CR17","unstructured":"US-CERT, Vulnerability note VU#468798"},{"key":"1870_CR18","unstructured":"US-CERT, Vulnerability note VU#372878"},{"key":"1870_CR19","doi-asserted-by":"crossref","unstructured":"Valdes A, Cheung S (2009) Communication pattern anomaly detection in process control systems. Technologies for Homeland Security, 2009. HST\u201809. IEEE Conference on. IEEE","DOI":"10.1109\/THS.2009.5168010"},{"key":"1870_CR20","unstructured":"Valdes A, Cheung S (2009) Intrusion monitoring in process control systems. System sciences, 2009. HICSS\u201909. 42nd Hawaii International Conference on. IEEE"},{"key":"1870_CR21","unstructured":"Yang D, Usynin A, Hines JW (2006) Anomaly-based intrusion detection for SCADA systems. 5th Intl. Topical Meeting on Nuclear Plant Instrumentation, Control and Human Machine Interface Technologies (NPIC&HMIT 05)"},{"key":"1870_CR22","unstructured":"Zhu B, Sastry S (2010) SCADA-specific intrusion detection\/prevention systems: a survey and taxonomy. Proceedings of the 1st Workshop on Secure Control Systems"}],"container-title":["Multimedia Tools and Applications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-014-1870-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11042-014-1870-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-014-1870-0","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,24]],"date-time":"2024-05-24T19:14:23Z","timestamp":1716578063000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11042-014-1870-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,3,2]]},"references-count":22,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2015,1]]}},"alternative-id":["1870"],"URL":"https:\/\/doi.org\/10.1007\/s11042-014-1870-0","relation":{},"ISSN":["1380-7501","1573-7721"],"issn-type":[{"value":"1380-7501","type":"print"},{"value":"1573-7721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,3,2]]}}}